I am specifically asking about Outlook Web Access (browser based Outlook), and not for any other email service or program.

Within Outlook Web Access, is there a way to tell whether or not an email was spoofed? For example, if I receive an email from "[email protected]", how can I be sure that the email is from "company.com" and not spoofed?

There is an option in Outlook to direct all messages from outside the organization to the junk folder, but I found that this feature is not reliable. Spoofed messages still get through.

  • Is looking at the email-headers an option?
    – yeah_well
    Jul 1, 2019 at 18:13
  • @VipulNair yes, if it is possible to do so in Outlook. However, I don't think there is a way to do that without opening the email first (which poses a security risk).
    – Sam Smith
    Jul 1, 2019 at 19:04
  • How did you come to that conclusion that opening a mail is a security risk?
    – yeah_well
    Jul 1, 2019 at 19:42
  • @VipulNair Email may contain an image or other link that gets fetched by outlook when opening the email and this gives information to the attacker. AFAICT there is no way to access the email headers without opening the email first in outlook online. Jul 2, 2019 at 12:08
  • @GiacomoAlzetta what kind of information?
    – yeah_well
    Jul 2, 2019 at 12:15


You must log in to answer this question.

Browse other questions tagged .